[larvitbase-api] Unintended Require

I would like to report Unintended Require vulnerability in `larvitbase-api` It allows loading arbitary non-production code (js files).

req.routed = {
	controllerFullPath: path.join(altControllerPaths[i], req.urlBase) + '.js',
	controllerPath: req.urlBase
};